On Sat, 3 Oct 2026 22:02:22 GMT, Hai-May Chao <[email protected]> wrote:
>> Enhance SSLHandshake benchmark to measure the TLS 1.3 server authentication >> of an ML-DSA-65 server certificate and CertificateVerify, compared with an >> ECDSA P-256 server authentication profile, across classical and hybrid key >> exchange groups. >> >> --------- >> - [X] I confirm that I make this contribution in accordance with the >> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai). > > Hai-May Chao has updated the pull request incrementally with one additional > commit since the last revision: > > Benchmark with the updated ECDSA-P256 and ML-DSA-65 profiles test/micro/org/openjdk/bench/java/security/TestCertificates.java line 65: > 63: * certificate signature = SHA384withRSA > 64: */ > 65: private static final String RSA_CA_CERT = The previous CA certs had a much longer validity lifetime. They did not expire until March 19, 2122. These 2 new certs expire on December 30, 2035. Although this is still a relatively long time from now, the test will unexpectedly fail after that date, so I would make the validity times longer and consistent with the prior cert. ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/33111#discussion_r4563924979
